EUVD-2016-9353

Malware in sbrugna...

BookReader Extension XSS

The vulnerability of the BookReader extension in the Yandex Browser exists due to the lack of measures taken to protect the structure of web pages. Exploiting this vulnerability allows a malicious actor to carry out XSS attacks remotely...

Yandex Browser for desktop cross-site scripting vulnerability

Yandex Browser for desktop is a desktop version of the Russian company Yandex. A cross-site scripting vulnerability exists in Yandex Browser BookReader in versions of Yandex Browser for desktop prior to 16.6. A remote attacker can exploit this vulnerability to execute arbitrary Javascript code...

CVE-2016-8505

XSS in Yandex Browser BookReader in Yandex browser for desktop for versions before 16.6. could be used by remote attacker for evaluation arbitrary javascript code...

Code injection

XSS in Yandex Browser BookReader in Yandex browser for desktop for versions before 16.6. could be used by remote attacker for evaluation arbitrary javascript code...

CVE-2016-8505

Vulnerability summary (CVE-2016-8505) : A cross-site scripting flaw in Yandex Browser for desktop, specifically in BookReader, affects versions prior to 16.6. A remote attacker could execute arbitrary JavaScript in the context of BookReader. The issue is tied to the BookReader component of Yandex...

CVE-2016-8505

XSS in Yandex Browser BookReader in Yandex browser for desktop for versions before 16.6. could be used by remote attacker for evaluation arbitrary javascript code...

CVE-2016-8505: Improper Neutralization of Input During Web Page Generation

XSS in Yandex Browser BookReader in Yandex browser for desktop for versions before 16.6. could be used by remote attacker for evaluation arbitrary javascript code...

PT-2016-3425

Name of the Vulnerable Software and Affected Versions Yandex browser for desktop versions prior to 16.6 Description The issue is related to a lack of protection for the web page structure in the BookReader extension of Yandex Browser, which could allow a remote attacker to conduct a cross-site...